CSSLP SECURE SOFTWARE LIFECYCLE PROFESSIONAL ALL-IN-ONE EXAM GUIDE, Third Edition, 3rd Edition

CHAPTER 9

Analyze Code for Security Risks

In this chapter you will

•   Examine secure code reuse

•   Explore vulnerability databases/lists including Open Web Application Security Project Top 10 and the Common Weakness Enumeration

•   Learn about static application security testing

•   Learn about dynamic application security testing

•   Explore manual code review

•   Learn to look for malicious code

•   Examine interactive application security testing

•   Learn about runtime application security protection

•   Explore common vulnerabilities and countermeasures

Designing an application is the beginning of implementing security into the final application. Using the information uncovered in the requirements phase, designers create the blueprint ...